Radius error encountered while commiting changes to the SG

Products

• SG-VA
• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

SG not accepting secret string during Radius configuration that says:

 

 

Environment

Release : 6.7.x or 7.x

Component : Authentication

Cause

There might be configuration set on the SG that rejected the radius realm secret.  To identify this, suggest to use CLI commands to see an actual error:

enable

conf t

security radius edit-realm <your radius realm>

alternate-server secret <radius secret>

***The output should provide clues the cause of the error***

 

E.g.

enable

conf t

security radius edit-realm rad_test

alternate-server secret passw

% Password does not meet minimum length (6)  << sample of meaningful message 

Resolution

Two options:

1. Reconfigure radius server's secret that complies with minimum length SG required or;

2. Relax the minimum length requirement on SG side. 

 

e.g.

enable

conf term

security password-min-len <#>